Veille live
Veille CyberInfra — Veille cybersecurite : German military drone operations disrupted by cyberattack Veille CyberInfra — Veille cybersecurite : Trezor confirms crypto-stealing implants in three wallets, releases fix Veille CyberInfra — Veille cybersecurite : New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs Veille CyberInfra — Veille cybersecurite : Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper Veille CyberInfra — Veille cybersecurite : PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Veille CyberInfra — Veille cybersecurite : Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Veille CyberInfra — Veille cybersecurite : German military drone operations disrupted by cyberattack Veille CyberInfra — Veille cybersecurite : Trezor confirms crypto-stealing implants in three wallets, releases fix Veille CyberInfra — Veille cybersecurite : New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs Veille CyberInfra — Veille cybersecurite : Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper Veille CyberInfra — Veille cybersecurite : PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Veille CyberInfra — Veille cybersecurite : Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

Veille cybersecurite : GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

03/10/2026

Source : The Hacker News

A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory.

The gateway is the service that connects a GitLab instance to AI models, and only organizations that host their own gateway need to act. The flaw is fixed in gateway versions 19.2.4, 19.3.2, and 19.4.1.

The flaw

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog